Lucene search
PRIOn knowledge basePRION:CVE-2019-11049HistoryDec 23, 2019 - 3:15 a.m.
Double free
2019-12-2303:15:00
PRIOn knowledge base
www.prio-n.com
8
In PHP versions 7.3.x below 7.3.13 and 7.4.0 on Windows, when supplying custom headers to mail() function, due to mistake introduced in commit 78f4b4a2dcf92ddbccea1bb95f8390a18ac3342e, if the header is supplied in lowercase, this can result in double-freeing certain memory locations.
References
bugs.php.net/bug.php?id=78943
lists.fedoraproject.org/archives/list/[email protected]/message/N7GCOAE6KVHYJ3UQ4KLPLTGSLX6IRVRN/
lists.fedoraproject.org/archives/list/[email protected]/message/XWRQPYXVG43Q7DXMXH6UVWMKWGUW552F/
seclists.org/bugtraq/2020/Feb/27
security.netapp.com/advisory/ntap-20200103-0002/
www.debian.org/security/2020/dsa-4626
www.tenable.com/security/tns-2021-14
Related
nvd
nvd
CVE-2019-11049
2019-12-23 03:15:11
cvelist
cvelist
CVE-2019-11049 mail() may release string with refcount==1 twice
2019-12-17 00:00:00
symantec
symantec
PHP CVE-2019-11049 Remote Denial Of Service Vulnerability
2019-12-18 00:00:00
redhatcve
redhatcve
CVE-2019-11049
2020-04-05 05:17:59
cve
cve
CVE-2019-11049
2019-12-23 03:15:11
debiancve
debiancve
CVE-2019-11049
2019-12-23 03:15:11
ubuntucve
ubuntucve
CVE-2019-11049
2019-12-23 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 10 package php8.1 version 7.3.13-alt1
2019-12-20 00:00:00
Security fix for the ALT Linux 10 package php8.0 version 7.3.13-alt1
2019-12-20 00:00:00
Security fix for the ALT Linux 9 package php7 version 7.3.13-alt1
2019-12-27 00:00:00
openvas
openvas
Mageia: Security Advisory (MGASA-2019-0412)
2022-01-28 00:00:00
PHP Multiple Vulnerabilities (Dec 2019) - Linux
2019-12-19 00:00:00
Fedora Update for php FEDORA-2019-437d94e271
2020-01-08 00:00:00
mageia
mageia
Updated php packages fix security vulnerabilities
2019-12-25 22:08:41
fedora
fedora
[SECURITY] Fedora 30 Update: php-7.3.13-1.fc30
2020-01-03 20:36:41
[SECURITY] Fedora 31 Update: php-7.3.13-1.fc31
2020-01-05 00:42:40
nessus
nessus
Fedora 30 : php (2019-437d94e271)
2020-01-06 00:00:00
Amazon Linux AMI : php72 / php73 (ALAS-2020-1339)
2020-02-10 00:00:00
PHP 7.3.x < 7.3.13 / 7.4.x < 7.4.1 Multiple Vulnerabilities
2020-01-10 00:00:00
amazon
amazon
Medium: php72, php73
2020-02-04 22:42:00
Important: php72
2024-02-14 20:03:00
Important: php73
2024-02-01 19:33:00
debian
debian
[SECURITY] [DSA 4626-1] php7.3 security update
2020-02-17 20:39:09